In the Specification 



On page 1, lines 12 please take out the words "is a continuation" and put in its stead the words "claims 
priority". 

This application is a continuation claims priority of U.S. Provisional Application Ser. No. 60/320,013, 
filed March 17, 2003 on behalf of Baschy, entitled "User Interface Driven Access Control", the content 
of which is hereby incorporated by reference as if set forth fully herein. 

On page 3 after line 15 in the first paragraph inserted per response of 2008-04-07 please take out the 
first instance of the word "a" and put in its stead the word "an" and 

on page 3 after line 15 at the end of the first paragraph inserted per response of 2008-04-07 please 
insert the sentence " Examples of "likeness of a person" are in Figures 9 to 30 and 32 to 34.". 

The term "likeness of a person" means [[a]]an identifying pictorial representation of the person, an 
imitative image, e.g. an identifying photograph, possibly a modified photograph or a machine 
processed image of that person that sufficiently corresponds to the person's appearance to allow a 
normally skilled human to identify the person in an encounter with normal visual contact. Examples of 
"likeness of a person" are in Figures 9 to 30 and 32 to 34. 

On page 3 after line 15 after the first sentence of the second paragraph inserted per response of 
2008-04-07 please insert the sentence " Examples of "normal size, legibly scaled, unabridged 
representation of the content of a resource" are display regions 401 and 501 in Figures 9 to 23 and 26." 
and 

on page 3 after line 15 in the second sentence of the second paragraph inserted per response of 
2008-04-07 please take out the word "It" and put in its stead the words "A "normal size, legibly scaled, 
unabridged representation of the content of a resource"". 

A "normal size, legibly scaled, unabridged representation of the content of a resource" is what 
commonly is shown in normal use by a word processing application or by a drawing software when the 
operator views or edits a document. Examples of "normal size, legibly scaled, unabridged 
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representation of the content of a resource" are display regions 401 and 501 in Figures 9 to 23 and 26. 
[[it]] A "normal size, legibly scaled, unabridged representation of the content of a resource" is different 
than a thumbnail of a drawing or a summary of a document. 

On page 3 after line 15 after the first sentence of the third paragraph inserted per response of 
2008-04-07 please insert the sentence " It will be appreciated by one skilled in the art that recognizable 
examples of "concurrently visible and concurrently operable" display regions are in Figures 9, 1 1 to 16, 
18, 20 to 23 and 26, where all display regions are visible at the same time and all display regions by 
using the same minimal number of steps by the operator can be interacted with equally immediately to 
initiate functions, with such steps required to initiate a function in contemporary art frequently being 
one mouse movement and one mouse button pressing and one mouse button releasing, the steps of 
pointing and clicking.". 

A display region for access control settings for a resource and a display region for content of the 
resource are "concurrently visible and concurrently operable" if the operator can choose to initiate a 
function in either region without having to effectively put away the other. It will be appreciated by one 
skilled in the art that recognizable examples of "concurrently visible and concurrently operable" 
display regions arc in Figures 9. 1 1 to 16. 18. 20 to 23 and 26. where all display regions arc visible at 
the same time and all display regions by using the same minimal number of steps by the operator can 
be interacted with equally immediately to initiate functions, with such steps required to initiate a 
function in contemporary art frequently being one mouse movement and one mouse button pressing 
and one mouse button releasing, the steps of pointing and clicking. In contrast, a modal dialog box for 
access control settings would not be concurrently operable with a document content region, as the 
modal dialog box would block editing of document content until after the modal dialog box goes away, 
such going away e.g. caused by the operator clicking on an Apply or Cancel button in the dialog, 
although then with the document content region being operable the modal dialog box would neither be 
visible nor operable until initiated to be shown again and to block editing again. Also in contrast, 
tabbed panes don't provide concurrent visibility, i.e. settings and content if in two separate panes 
wouldn't be concurrently visible. 

On page 3 after the three paragraphs inserted per response of 2008-04-07 please insert the following 
paragraphs. 
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"Revocable access control settings" are access control settings that at a future point in time can be 
changed so that e.g. a person who has had access then will no longer have access, or e.g. a person who 
has had write access then only will have read access. Being "revocable" is considered normal for 
access control settings. The ability for a user to be "removed from access to" a resource is intrinsic to 
the present invention, evidenced at least by the mention of removal. "Revocable" is in contrast to non- 
revocable access, e.g. in contrast to commonly used email, which once a message has been sent no 
longer allows for a recipient to be removed. "Revocable" is essential to allow correction of operator 
errors. "Revocable" is required when changes in circumstances lead to changes in "need to know". 
"Revocable" can help reduce information overload. "Revocable" enables reducing access after a 
document (e.g. medical record, legal record) or its surrounding real world matter (e.g. medical case, 
lawsuit) has been dealt with (e.g. patient discharged, case closed). 

"Persistent access control settings" are access control settings that are stored persistently, often to disk, 
in such a way that users and other parties expect them to last for lengths of time that for most practical 
purposes appear to be without end. Being "persistent" is considered normal for access control settings. 
"Persistent storage" of access control settings is intrinsic to the present invention, evidenced at least by 
repeated mention of persistent storage 155. "Persistent" is in contrast to non-persistent settings, e.g. in 
contrast to settings that last only for the duration of an instant messaging conversation, an online 
meeting or an online chat. "Persistent" is required for collaboration among those in different working 
periods (day shift versus night shift), for collaboration across distant time zones, for collaboration 
without "same time presence", for long running workflows and for all situations where the expectation 
is for "records to remain constant for a long time". 

In some embodiments, notwithstanding above definition, "persistent access control settings" may come 
to an end purposefully in a controlled manner at contextually meaningful, defined points in time, e.g. 
after 30 days or when a patient has been discharged. Access control settings that come to an end in a 
controlled manner at defined points in time may or may not be known in prior art and are mentioned 
here solely for the purpose of more clearly defining what still should be considered "persistent access 
control settings", by its nature as well as by its probable implementation using persistent storage. 
"Persistent" is in contrast to non-persistent settings, e.g. in contrast to settings that are lost when a 
controlling application or computer in a normal course of events or typical use shuts down, suspends or 
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restarts. "Persistent" fulfills more significant needs and has more essential impact on the productivity 
of professionals than non-persistent. Professionals often need access control settings that remain 
constant and behave predictably, i.e. without undue susceptibility to surrounding events. 

"Persistent yet revocable access control settings" are access control settings that are persistent by 
default yet allow revocation if needed. Being "persistent yet revocable" is considered normal for access 
control settings. 

Representative examples of a "digital document" are a word processing document, a text file, a digital 
photograph, a digital illustration, a digital engineering drawing, a digital audio recording, a digital 
medical record, a digital legal document, a Web page and a source code file. 

On page 31 after line 15 please insert the following one paragraph. 

In the design of computer user interface, representations of a point in time commonly include an 
expression of relative time (e.g. "yesterday" or "2 hours ago"). 
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